CurlShip Directory Submission

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill is coherent with its stated purpose, but users should know it submits a product URL and contact email to a public directory and may suggest adding a badge to a website.

Before using this skill, make sure you want the product listed publicly, use an appropriate contact email, review any paid-tier checkout link yourself, and do not let an agent add the badge to your website unless you approve the exact change.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A product URL and contact email may be submitted to a public directory, and an upgrade action may produce a payment checkout link.

Why it was flagged

The skill documents API calls that can create a public listing and start a paid upgrade flow. These actions are aligned with the stated purpose, but they should be user-confirmed.

Skill content
Uses `POST /api/submit` to add a new listing ... Uses `POST /api/upgrade` to get a checkout URL for paid tier upgrades
Recommendation

Confirm the exact URL, email, and tier with the user before submitting or requesting an upgrade checkout URL.

What this means

If followed by an agent with file or site-editing access, the website could be changed to add a public link to CurlShip.

Why it was flagged

The workflow suggests modifying the user's website by adding badge HTML. This is disclosed and purpose-related, but website edits are higher-impact than a simple API lookup.

Skill content
Add the badge HTML to the product's website for a dofollow link (free tier)
Recommendation

Only add the badge after explicit user approval and after showing the exact HTML and files or pages that would be changed.

What this means

The external service will receive the submitted URL and email, and the product URL may become part of a public listing.

Why it was flagged

The skill sends a product URL and contact email to the CurlShip provider API. This data flow is disclosed and necessary for the listing workflow.

Skill content
`url` (required): Product URL ... `email` (required): Contact email for the listing owner.
Recommendation

Use a contact email and product URL that are intended for public directory submission.